Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft
File:                     ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft (raw, json)
Hash identifier:          KQXl0QgBf8o+KFeQtecZYsmRsLJ3GnmRu/l2SCtLMOE=
Subject key identifier:   3B:CC:81:54:5E:DB:90:BB:6E:67:14:1E:DE:DD:08:85:FB:C0:2B:E8
Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
Certificate issuer:       /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Certificate serial:       0BB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft
Manifest number:          0B8F
Signing time:             Fri 12 Jun 2026 19:12:23 +0000
Manifest this update:     Fri 12 Jun 2026 19:12:23 +0000
Manifest next update:     Fri 19 Jun 2026 19:12:23 +0000
Files and hashes:         1: ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl (hash: F1L8jXaVk2kIyPPNEkPda/WhTdn05C6GKZ+yEjjB6Pg=)
                          2: EF29C95E69C311EF82BCE77AC4F9AE02.roa (hash: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=)
                          3: BA7B024C04D811EDBE98F982C4F9AE02.roa (hash: Qrs9ea1Ryt4mplsCkDhjHp70Ezhx/br174uLvjICktg=)
                          4: A2AF0622853711EFA09C892EC4F9AE02.roa (hash: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl
                          rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2992 (0xbb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
        Validity
            Not Before: Jun 12 19:12:23 2026 GMT
            Not After : Jun 19 19:12:23 2026 GMT
        Subject: CN=6a2c5a17-6d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b4:d6:45:4d:1e:8e:eb:05:a7:0d:1f:ca:2a:
                    7e:6f:82:c0:ee:e0:7f:f0:4a:d9:78:15:8a:24:61:
                    ee:07:53:96:f5:d3:04:47:a3:b3:db:40:1b:e1:ba:
                    14:fe:b0:66:80:ea:28:f9:02:21:23:c9:31:17:83:
                    b8:f7:56:65:c8:08:c7:92:4c:ea:61:42:62:29:9c:
                    a8:41:57:f1:1a:f6:9f:78:f1:04:a9:76:a0:b6:0c:
                    5a:fe:68:cd:81:fe:0e:0b:75:02:20:1b:f8:49:64:
                    53:b1:9c:a4:5b:a2:ba:bb:f3:a2:2b:d0:03:4f:ec:
                    63:cc:a4:c1:35:ff:53:51:7c:20:fb:2e:2c:1e:72:
                    8a:20:0e:10:d4:4b:48:7a:2b:65:a8:ac:99:f6:b6:
                    a3:fe:13:78:ae:26:6e:aa:ba:31:89:2d:c4:aa:78:
                    25:6b:01:8d:05:3c:07:1e:41:6c:a8:03:b6:5f:c3:
                    3d:f9:1d:60:80:a1:36:5b:46:40:a8:15:92:08:96:
                    8f:09:3a:21:19:d8:41:57:aa:4e:2d:56:91:d3:df:
                    17:0c:94:09:fc:9e:21:16:e2:10:82:e2:cc:44:d4:
                    e1:f6:aa:f8:db:ae:0b:45:06:18:2a:db:5a:9a:7c:
                    ff:36:bd:7e:6b:1a:3c:40:85:09:f7:17:f6:18:3e:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CC:81:54:5E:DB:90:BB:6E:67:14:1E:DE:DD:08:85:FB:C0:2B:E8
            X509v3 Authority Key Identifier:
                keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:3d:16:75:93:48:da:a4:71:55:53:1d:4c:c7:c7:69:5d:85:
         37:e4:ae:be:d0:f0:bf:31:8f:8f:2f:3b:0c:e4:06:94:74:a1:
         54:e6:54:9d:67:55:a2:30:92:1d:3e:fc:31:22:7c:49:79:03:
         77:12:e4:37:71:a0:cf:91:e5:08:55:d9:e5:12:98:e8:8d:f5:
         b5:b3:65:90:41:a9:31:4a:00:70:7f:7e:a2:dd:cb:3e:24:8c:
         e3:df:23:5e:40:f2:66:5e:80:09:c0:90:c4:0d:17:18:9b:f7:
         d0:3a:e2:64:0a:78:48:95:9e:b7:dc:fd:c3:de:92:ec:d9:21:
         34:fa:0d:ec:22:f2:a9:05:53:15:b2:52:1f:cb:95:e0:0a:0f:
         f8:3b:90:61:46:eb:04:01:c5:5b:e4:f7:03:98:d8:48:15:b5:
         bc:64:7c:98:78:5e:34:6a:d9:4c:f0:23:e4:9b:fb:16:92:d6:
         ca:41:0f:d9:3c:45:0c:c3:c3:8b:51:49:34:c7:e9:74:17:42:
         5a:ad:f9:9e:a6:cd:be:63:bc:1a:16:6b:fa:0c:2b:ac:a8:a4:
         43:1a:8f:7e:95:34:5a:34:ef:5e:70:51:dd:f8:8c:5f:99:be:
         ca:76:7d:af:67:0c:a7:41:89:e0:4c:9d:c1:84:2a:db:c6:6b:
         a5:d0:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:00 2026 by rpki-client